last executing test programs: 1m13.111748934s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c000153f7d84df90ae9a1280026bd70000600df2504008b43b783c961f4c3677f000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m11.837878494s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000005}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 56.912202796s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000005}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 56.069248836s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c000153f7d84df90ae9a1280026bd70000600df2504008b43b783c961f4c3677f000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 42.021023301s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000005}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 40.684587239s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c000153f7d84df90ae9a1280026bd70000600df2504008b43b783c961f4c3677f000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 27.889227458s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000005}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 26.233090864s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c000153f7d84df90ae9a1280026bd70000600df2504008b43b783c961f4c3677f000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 13.171892175s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000005}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 12.385665131s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c000153f7d84df90ae9a1280026bd70000600df2504008b43b783c961f4c3677f000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.913173213s ago: executing program 3 (id=2131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x5e}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), 0x49) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea725000000010000000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) close(r3) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="20a8c8b80000001100010029bd70000900000000000000", @ANYRES32=r8, @ANYBLOB="0085000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 2.975707082s ago: executing program 1 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000002000878e2dbd7000fedbdf250a200004060000000000010014000100fe80000000000000000000000000002c05001300090000006ab5166707fa4a57ad7ca273f3c8d4522f65e4c4079f72f58278293c605d61fe2cf205b0a0813400eaed65f16298231252d339f99a8b71d2d117813a1a5f46c865ddecfb8658ff9ecfdd"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100000000000004000008000c00", @ANYRES32=r4, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x25) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r8}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x40, 0x20008880}}], 0x2, 0x4c054) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'batadv_slave_1\x00'}}, 0x1e) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCATTCHAN(r13, 0x40047438, &(0x7f0000000100)=0x1) close(r13) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000800)={r2, 0x5, 0x7fffffff, 0x8}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r14, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000f14000826bd7000fddbdf2508004500636d61000d0045006f70615f766e6963f00000001100450069625f6d756c7469636173740000000008000300030000000800010001000000080001000200000008004500636d6100"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44040) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 2.97382718s ago: executing program 3 (id=2137): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x6000) r6 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r7 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r6) close(r7) 2.832097778s ago: executing program 1 (id=2138): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000800000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x0, {@in6_addr=@loopback, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.533901026s ago: executing program 2 (id=2140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf64000000000000070400000b000000b70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 2.199867458s ago: executing program 2 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x7b9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf90}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="5b5fbc4136392f27ccfe393308087ad8137a007383e2af6b4e926f0f1eaa5558197960feb94f0b32ba8be43991c9550db152e39997f3a7497c6ce2eb4df153c9f16cc9defc7f6754cb1c6d7efbf55ab7a49d6b71f6981e209d85795d7121baa20e7a225bd52a78e405e886d6c61b1fda28abf3d7b1626a2e4f547b3220bb09d7a17a91822dd1b6b0fd3d51ad1ea9c42ba2393079087da4a4669c3345ea32facff572577c2324c0a882283bed272c6c4cb1cc0179dd215bf11f1a7992d937b2b0da93017c1a7472ffebc90e6562f5f0ee474c5a", 0xd3}, {&(0x7f00000004c0)="ae714e7189b228e672930a2ac80e81274face429ca9ccd8ca716dd1cb783a604fb5067d28a19de50030ea502dcae377a1cd1d0a3df13fa24a11e2a4978311385175f", 0x42}], 0x2, &(0x7f0000000540)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4c40}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x0, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @pad1, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @private2}, @generic={0x5, 0x5b, "08bb46143568343dfe0128bfe79167d889a23b4be171fdd1326d58c13eb93476f3bed707e01b544c2ff961490f644c0a9222ee6999bec9e376b9b91bf7d366c11a383ce2e68a7f3dfe1014b7cc9ae491dc9ccde1aa4bfd039feaaf"}, @calipso={0x7, 0x8, {0x2, 0x0, 0x2, 0x2}}]}}}], 0xc8}}], 0x1, 0x85) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}}, 0x0) 2.049338489s ago: executing program 3 (id=2142): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$inet6(0x10, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="35d7bf24b01e7dad8eda553b9811", 0xe}, {&(0x7f0000000140)="16de61008f82e48354f212", 0xb}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f", 0x23}], 0x3}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1}, 0x8}], 0x33e, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="21b81884ddff90b4a39ec040da5fbba621652e1edf8763b91533361b353f379d71295999e8ce019d34022db8ab52fe4386fa476745c154610881a06aa885ab847df948bb5cfb90b553f28cf88bd85473f2c8623fb2c9156bc56ac059f1ec3f1579bce8e9de374c666dd905544c94f68e5d9f7b865afc3d66d83669a8ae105501499639540cee14804e2b437714f6402710a08510aec540b2e45300c3e6189e0b7bbbc6ceb1cf7d0e034880", 0xab}, {&(0x7f00000000c0)="37829db97f23dba750db04983487030f5816a95d056d6ec5b6194497a66aefb6b2ba3cfc914ba02e16e54ff4d98ecc4f69f7b0b8e30f7e641d1713108e4dd41dcc8fe8439b195761dfe6ee744f54301e9b13d50ceb9f0ed19eb7ef85b474", 0x5e}], 0x2, &(0x7f0000000180)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3d}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x5c, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4676}, {@multicast2, 0x6}, {@multicast1, 0x40}, {@loopback, 0xdc}]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @private=0xa010101}}}], 0xb8}}, {{&(0x7f0000000240)={0x2, 0x4a21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000280)="97bbcc7b84dcca303cfdbcfdc44fea042807d500a427131e7e9328b4311e8996357155c907035e51c235415f867f74d16a3474aaed4089eb2f9c0794a3cc23249f01b97a9f2e00dd2625dce1e694df91c446fb2c934ec257e183168f5938b93655eb9aa9033aef804d31d1154254813bd5d71366e26c71d08f32c9e51ffdddeea6657ea1fdb267fde5c3ec3502b3d8291b6c669fbda90d0337ac8bd49e355731a26dfcd20c7fc78306ea640d5c0289a87332d27aa4cd9215b6a5c0f773dc2e13be2676b2aaf563caa7", 0xc9}, {&(0x7f0000000380)="ef0fb9784506e294ca6f8fa32c3f0a0a5073b61af703f38e1914c71ceeb7610e7ec0d28e674f4ad5957f67dc9f66373086cecc77259f3c8339ce85995614146a6538570d2ee3388529d1a21788f643dda3eedc7082cfcca3", 0x58}], 0x3, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x77}}], 0x18}}], 0x2, 0x20000880) 2.000029852s ago: executing program 2 (id=2143): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080004"], 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x8, 0x6, 0xca, 0x3, 0x4, 0x1, 0x2}, 0xc) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x3, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="ffffd68d4f90afcdd736b9feffffff000000ebcf65d7844ed5010000000100e709000000379e5ca66710ee580adcf29974f6aef0da4c1b0435a6c24938848655016092cd2796408015f63595a40b56b86a4cae683d384b9e0be68ba65348c21adc1e29024d6731fa72b927e938007b28c348dba6158fb0a40000000033d0c4aaf0407ca03fe7dd4f9b56c0adbd995d176e61c11c4669e2"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.916020431s ago: executing program 1 (id=2144): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000000090006910a30000000000040000000000000095000200000000002f994f61ef34eeba1fc4a883ce77b9a9bb6cc1c98d9186"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) close(r1) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x17c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0x5, 0xe7, 0x6, 0x0, 0x1000, 0x1f3c3d5a, 0x2}}, {0x8, 0x2, [0x262, 0x10]}}, {{0x1c, 0x1, {0x0, 0x3, 0x73bd, 0x2, 0x1, 0x3, 0xfffffffb, 0x1}}, {0x6, 0x2, [0x7]}}, {{0xfcfb, 0x1, {0x4, 0x96, 0xaf40, 0x4, 0x2, 0x76b, 0x7, 0x5}}, {0xe, 0x2, [0x0, 0xfffa, 0x0, 0x4, 0x7]}}, {{0x1c, 0x1, {0xfd, 0x5, 0x7, 0x2, 0x9dd0f1586c629942, 0x9, 0x1, 0x25}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0xff, 0xe, 0x7, 0x4, 0x2, 0x3, 0x5, 0x8}}, {0x14, 0x2, [0x1, 0x9, 0x1, 0x0, 0x4, 0x2, 0x3, 0x5]}}, {{0x1c, 0x1, {0x3, 0x96, 0x8, 0x0, 0x0, 0x9, 0x80, 0x6}}, {0x10, 0x2, [0x8, 0x4, 0xffff, 0x8ce, 0x0, 0x55]}}, {{0x1c, 0x1, {0xfa, 0x7, 0x8, 0x0, 0x1, 0x4, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x20, 0xc, 0x0, 0x4, 0x2, 0x3, 0x8, 0x5}}, {0xe, 0x2, [0x1000, 0xfff8, 0x2, 0x9, 0x9]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) 1.820682481s ago: executing program 3 (id=2145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x4c}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d000000010000000000000014000000000000001001000002000000000000e6"], 0x30}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="008e777f9dbe9002", 0x8}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', r4, 0x29, 0xc9, 0x5a, 0xff09, 0x46, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x1, 0x1000, 0x8}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x17, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x33}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @tail_call]}, &(0x7f00000003c0)='GPL\x00', 0x200000, 0x1000, &(0x7f0000001840)=""/4096, 0x41000, 0xa, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xe, 0x6368, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000740)=[{0x3, 0x3, 0x4, 0x6}, {0x3, 0x1, 0xe, 0xa}, {0x1, 0x1, 0x6, 0xf}, {0xfffffffe, 0x4, 0x4, 0xb}], 0x10, 0x7, @void, @value}, 0x94) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x1c) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@getchain={0x3c, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x10001}]}, 0x3c}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00006c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08000100", @ANYRES32=r11, @ANYBLOB="040013001400034ca9fda632c30e00000000000000000104001300060012004e239e3e09c4f7b1"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, @timestamp_reply={0x11, 0x0, 0x0, 0xe800, 0x2, 0x2, 0x1000000}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000980)={r0, 0x80000000, 0x8, "4c71d11a1d324c6c5a6111affe5c7e694b60761f82543b9250a4fb0459d2464b32243b0bbc70372b3350c6e9d5d3164a0a9d3df13c9a846e042031b44ee3d09399f530f81cb93fe4986c5180acba4e122d51da8665d9d83a2f75defd8acf2318f5f22208298e75a3cc1403c53c93cc8aae645f371b4c4f"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}}, 0x0) 1.769068354s ago: executing program 2 (id=2146): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112200000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet(0x2b, 0x801, 0x0) connect$bt_l2cap(r2, &(0x7f0000000740)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000200)=0x9, 0x4) r3 = socket$inet6(0xa, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @mcast2, 0x8}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r3, &(0x7f000000a280), 0x0, 0x10000, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet(0x2b, 0x801, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000740)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000200)=0x9, 0x4) (async) socket$inet6(0xa, 0x3, 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @mcast2, 0x8}, 0x1c) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) (async) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x4, 0x4) (async) recvmmsg(r3, &(0x7f000000a280), 0x0, 0x10000, 0x0) (async) 1.692017346s ago: executing program 1 (id=2147): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001014000428bd7000fedbdf25080001000000000008004c000100000008004a00010000000800150004000000a2628200b1595c5f4a2ad070de6030da6a24043bcd264af31d58d650a82c3c840c699228947709c19ddd624cf27d31a7e6ae815a4bbf79e48d2faf739809d335e1f59fb2764b9f0ef098b3f5ad8c5c94d4528dacb7e6d9779c1477e6d61e382ff1ceb37ecd7244bb93320f"], 0x30}}, 0x4008801) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x38, 'net'}, {0x2d, 'net_prio'}, {0x2d, 'cpuacct'}]}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c000200190000000f000000060001000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00J\x00', @ANYRES32=r9, @ANYBLOB], 0x58}}, 0x8000) 1.633278007s ago: executing program 3 (id=2148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x2b, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002c0001000000000000000000040000800e0011802fe5afbf24fbcccc552f0000ba8c9f4a37236f9963b82960e594465797ac0612664c7da7fc3a364a19c723acdb8ad15c"], 0x24}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002c0001000000000000000000040000800e0011802fe5afbf24fbcccc552f0000ba8c9f4a37236f9963b82960e594465797ac0612664c7da7fc3a364a19c723acdb8ad15c"], 0x24}], 0x1}, 0x0) (async) 1.605107599s ago: executing program 2 (id=2149): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001100)=[@in6={0xa, 0x4e22, 0x7, @loopback, 0x8}, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x4e20, @loopback}], 0x3c) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xf5, "c434c23bfaf676a2d1099249a7ee6fd3dbadafba141ff1d79b7c4ec35e9a2df5a825ff8eea8ec934c6c824cb86e8b56441cd8f9f6f077e986c5b2339d88a07cd76a25bbdb9821dfa37de8c0abc8f48629f8bf0465155e10b54118d348b7a9fff1ba4862899f8b457f123a0fcd0bae7bb3e497a9c37da4fde719dc780d217552e9026d2dc85d3310712817c09fc5b7772e38f4e8027017829d91c7bbb35d01f83d288fbedd2254979ae97e94b6a0bdf40232c7c6c11619653cafae1bf56bf357b31a16ad3e004718489e85d16a8ba4ced5d3dee333b4a09eeef48d60a7e9958e97c320f5022cd05d24ef9d6ee84eba8459479c630de"}, &(0x7f00000001c0)=0xfd) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000df0000000000000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.549000906s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000005}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 1.467974034s ago: executing program 1 (id=2150): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f00000000c0)}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) 7.914698ms ago: executing program 1 (id=2151): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xdc, 0x4, 0x5, @empty, @local, 0x7, 0x80, 0x80, 0x8001}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="77690addcfbe1f", 0x7}, {&(0x7f0000000100)="2492c6", 0x3}], 0x2, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x7, 0x5, 0x4410, 0xffffffffffffffff, 0xffff, '\x00', r0, r1, 0x1, 0x5, 0x2, 0x5, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6.629751ms ago: executing program 2 (id=2152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x98a, &(0x7f0000001080)={[0xfffffffffffffffc]}, 0x8) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x0, 0xbef0, 0x6}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x8d6, 0x3, 0x5, 0x9}, {0xdc, 0x0, 0x3, 0xff}]}) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 4.50636ms ago: executing program 3 (id=2153): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3a9}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 0s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c000153f7d84df90ae9a1280026bd70000600df2504008b43b783c961f4c3677f000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): dding ib device syz1 with port count 1 [ 272.904433][T12425] smc: ib device syz1 port 1 has pnetid [ 272.981823][T12219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.032353][T12219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.130932][ T5840] Bluetooth: hci3: command tx timeout [ 273.286818][T12446] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 273.293079][T12192] veth0_vlan: entered promiscuous mode [ 273.322383][T12446] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 273.336331][T12192] veth1_vlan: entered promiscuous mode [ 273.344384][T12446] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1766'. [ 273.359297][T12219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.394075][T12446] NCSI netlink: No device for ifindex 458760 [ 273.414942][T12219] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.423923][T12451] ip6t_srh: unknown srh match flags 5294 [ 273.451804][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.459011][ T8210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.518813][T12192] veth0_macvtap: entered promiscuous mode [ 273.548865][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.556039][ T8210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.601549][T12192] veth1_macvtap: entered promiscuous mode [ 273.697164][T12192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.719366][T12192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.740091][T12192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.750594][T12192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.755944][T12462] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1768'. [ 273.796966][T12192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.806599][T12192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.027853][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.035968][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.112772][T12219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.149415][ T8202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.169091][ T8202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.251509][T12219] veth0_vlan: entered promiscuous mode [ 274.299709][T12219] veth1_vlan: entered promiscuous mode [ 274.320415][T12478] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 274.399911][T12219] veth0_macvtap: entered promiscuous mode [ 274.413441][T12219] veth1_macvtap: entered promiscuous mode [ 274.443043][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.487299][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.513195][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.522017][T12487] pim6reg1: entered promiscuous mode [ 274.538956][T12487] pim6reg1: entered allmulticast mode [ 274.546532][T12486] tipc: Enabling not permitted [ 274.552147][T12486] tipc: Enabling of bearer rejected, failed to enable media [ 274.617894][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.629102][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.657558][T12219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.709160][T12219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.718649][T12219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.729118][T12219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.738455][T12219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.954637][ T1095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.163167][ T1095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.251811][T12499] lo speed is unknown, defaulting to 1000 [ 275.278297][ T1095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.331821][ T8200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.353254][ T8200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.409521][ T1095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.474853][ T8200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.498526][ T8200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.712570][T12497] lo speed is unknown, defaulting to 1000 [ 275.728411][T12497] lo speed is unknown, defaulting to 1000 [ 275.735009][T12497] lo speed is unknown, defaulting to 1000 [ 275.754257][T12497] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.767766][T12497] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.791188][T12497] lo speed is unknown, defaulting to 1000 [ 275.799882][T12497] lo speed is unknown, defaulting to 1000 [ 275.807430][T12497] lo speed is unknown, defaulting to 1000 [ 275.813759][T12497] lo speed is unknown, defaulting to 1000 [ 275.821200][T12497] lo speed is unknown, defaulting to 1000 [ 275.828361][T12497] lo speed is unknown, defaulting to 1000 [ 275.918274][ T1095] bridge_slave_1: left allmulticast mode [ 275.923976][ T1095] bridge_slave_1: left promiscuous mode [ 275.936429][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.945064][ T1095] bridge_slave_0: left allmulticast mode [ 275.951172][ T1095] bridge_slave_0: left promiscuous mode [ 275.957902][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.544364][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.554345][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.562633][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.576672][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.609942][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.617509][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.846609][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.863660][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.873811][ T1095] bond0 (unregistering): Released all slaves [ 276.888313][T12509] tipc: Started in network mode [ 276.893238][T12509] tipc: Node identity ac1414aa, cluster identity 4711 [ 276.901022][T12509] tipc: New replicast peer: 10.1.1.2 [ 276.906652][T12509] tipc: Enabled bearer , priority 10 [ 276.921491][T12524] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 276.936075][T12524] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 277.000482][T12529] lo speed is unknown, defaulting to 1000 [ 277.244084][T12529] lo speed is unknown, defaulting to 1000 [ 277.493543][ T1095] hsr_slave_0: left promiscuous mode [ 277.499831][ T1095] hsr_slave_1: left promiscuous mode [ 277.506304][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.513733][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.522331][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.530036][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.554443][ T1095] veth1_macvtap: left promiscuous mode [ 277.560367][ T1095] veth0_macvtap: left promiscuous mode [ 277.566103][ T1095] veth1_vlan: left promiscuous mode [ 277.571374][ T1095] veth0_vlan: left promiscuous mode [ 277.960811][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'. [ 278.042216][ T5887] tipc: Node number set to 2886997162 [ 278.280983][ T29] audit: type=1107 audit(1740415526.645:6): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 278.378016][T12563] Bluetooth: MGMT ver 1.23 [ 278.434153][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.464944][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.473826][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.494522][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.504563][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.519704][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.602273][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 278.659182][ T5840] Bluetooth: hci1: command tx timeout [ 278.676894][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 279.263561][T12568] tipc: Enabling of bearer rejected, failed to enable media [ 279.306871][T12529] chnl_net:caif_netlink_parms(): no params data found [ 279.431028][T12564] lo speed is unknown, defaulting to 1000 [ 279.591621][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.630628][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.655528][T12529] bridge_slave_0: entered allmulticast mode [ 279.664752][T12529] bridge_slave_0: entered promiscuous mode [ 279.684333][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.716294][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.718291][T12590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1796'. [ 279.745634][T12529] bridge_slave_1: entered allmulticast mode [ 279.759207][T12529] bridge_slave_1: entered promiscuous mode [ 279.844615][T12529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.875026][T12529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.914542][T12595] tipc: New replicast peer: 255.0.0.255 [ 279.921491][T12595] tipc: Enabled bearer , priority 10 [ 279.928572][T12564] lo speed is unknown, defaulting to 1000 [ 279.931135][T12589] netlink: 'syz.1.1796': attribute type 29 has an invalid length. [ 279.979143][T12529] team0: Port device team_slave_0 added [ 279.998959][T12529] team0: Port device team_slave_1 added [ 280.077695][T12529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.084884][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.118163][T12529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.202877][ T1095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.221179][T12529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.229303][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.258168][T12529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.418528][ T1095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.565689][ T5840] Bluetooth: hci3: command tx timeout [ 280.590112][ T1095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.653292][T12529] hsr_slave_0: entered promiscuous mode [ 280.670329][T12529] hsr_slave_1: entered promiscuous mode [ 280.676914][T12529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.684499][T12529] Cannot create hsr debugfs directory [ 280.691030][T12597] lo speed is unknown, defaulting to 1000 [ 280.699255][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 280.732917][T12608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1801'. [ 280.742115][ T5840] Bluetooth: hci1: command tx timeout [ 280.764624][ T1095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.979482][T12564] chnl_net:caif_netlink_parms(): no params data found [ 281.016318][T12616] tipc: Enabling not permitted [ 281.022654][T12616] tipc: Enabling of bearer rejected, failed to enable media [ 281.158071][T12597] lo speed is unknown, defaulting to 1000 [ 281.257927][ T1095] bridge_slave_1: left allmulticast mode [ 281.264576][ T1095] bridge_slave_1: left promiscuous mode [ 281.270591][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.281688][ T1095] bridge_slave_0: left allmulticast mode [ 281.288955][ T1095] bridge_slave_0: left promiscuous mode [ 281.300752][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.707933][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.719298][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.732095][ T1095] bond0 (unregistering): Released all slaves [ 281.777202][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.784343][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.805511][T12564] bridge_slave_0: entered allmulticast mode [ 281.812607][T12564] bridge_slave_0: entered promiscuous mode [ 281.865620][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.884375][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.915500][T12564] bridge_slave_1: entered allmulticast mode [ 281.941160][T12564] bridge_slave_1: entered promiscuous mode [ 282.051875][T12627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.068520][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.173743][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.316295][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1808'. [ 282.419330][T12564] team0: Port device team_slave_0 added [ 282.437046][T12564] team0: Port device team_slave_1 added [ 282.457384][T12637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1808'. [ 282.486631][T12637] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1808'. [ 282.579318][T12564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.610820][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.645605][ T5840] Bluetooth: hci3: command tx timeout [ 282.659658][T12564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.722686][T12564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.738536][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.777654][T12564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.805422][ T5840] Bluetooth: hci1: command tx timeout [ 282.982810][T12564] hsr_slave_0: entered promiscuous mode [ 283.014428][T12564] hsr_slave_1: entered promiscuous mode [ 283.028807][T12564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.052721][T12564] Cannot create hsr debugfs directory [ 283.134333][ T1095] hsr_slave_0: left promiscuous mode [ 283.146391][ T1095] hsr_slave_1: left promiscuous mode [ 283.152674][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.167617][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.211992][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.225894][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.280987][ T1095] veth1_macvtap: left promiscuous mode [ 283.298509][ T1095] veth0_macvtap: left promiscuous mode [ 283.304176][ T1095] veth1_vlan: left promiscuous mode [ 283.309991][ T1095] veth0_vlan: left promiscuous mode [ 283.775404][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 283.821119][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 284.431907][T12529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.444676][T12665] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1816'. [ 284.469703][T12665] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 284.505409][T12529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.566803][T12529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.601114][T12529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.724492][T12674] vlan0: entered allmulticast mode [ 284.730033][ T5840] Bluetooth: hci3: command tx timeout [ 284.895049][ T5840] Bluetooth: hci1: command tx timeout [ 285.074321][T12684] IPVS: Error connecting to the multicast addr [ 285.234017][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.285784][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.301911][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.309115][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.373022][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.380270][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.533682][T12564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.572966][T12564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.603327][T12564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.636318][T12564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.729455][T12529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.786687][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.816166][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.829160][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.836420][ T8200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.890027][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.897307][ T8210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.996608][T12564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.268757][T12529] veth0_vlan: entered promiscuous mode [ 286.404694][T12529] veth1_vlan: entered promiscuous mode [ 286.647696][T12529] veth0_macvtap: entered promiscuous mode [ 286.678638][T12719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.732435][T12529] veth1_macvtap: entered promiscuous mode [ 286.798050][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.805528][ T5840] Bluetooth: hci3: command tx timeout [ 286.857773][T12529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.906383][T12529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.942537][T12529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.961791][T12529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.983746][T12529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.003112][T12529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.146628][T12564] veth0_vlan: entered promiscuous mode [ 287.191988][T12564] veth1_vlan: entered promiscuous mode [ 287.261214][ T8210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.295464][ T8210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.345992][T12738] netlink: 'syz.1.1829': attribute type 3 has an invalid length. [ 287.367611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.380969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.381700][T12564] veth0_macvtap: entered promiscuous mode [ 287.436518][T12564] veth1_macvtap: entered promiscuous mode [ 287.476949][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.506291][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.527484][T12564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.546113][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.596619][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.616265][T12564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.638639][T12564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.660217][T12564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.672504][T12564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.681624][T12564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.903563][T12752] lo speed is unknown, defaulting to 1000 [ 287.965499][ T8200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.983694][ T8200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.032057][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.056148][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.243411][ T8210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.395584][ T8210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.582935][ T8210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.610530][T12752] lo speed is unknown, defaulting to 1000 [ 288.671759][ T8210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.839389][ T8210] bridge_slave_1: left allmulticast mode [ 288.845059][ T8210] bridge_slave_1: left promiscuous mode [ 288.851285][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.861511][ T8210] bridge_slave_0: left allmulticast mode [ 288.867871][ T8210] bridge_slave_0: left promiscuous mode [ 288.873637][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.341127][ T8210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.356672][ T8210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.367552][ T8210] bond0 (unregistering): Released all slaves [ 289.656504][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.666573][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.675107][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.708646][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.719128][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.729484][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.787012][T12765] lo speed is unknown, defaulting to 1000 [ 289.922710][ T8210] hsr_slave_0: left promiscuous mode [ 289.930898][ T8210] hsr_slave_1: left promiscuous mode [ 289.951862][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.959537][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.971369][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.979801][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.007520][ T8210] veth1_macvtap: left promiscuous mode [ 290.013259][ T8210] veth0_macvtap: left promiscuous mode [ 290.018965][ T8210] veth1_vlan: left promiscuous mode [ 290.024233][ T8210] veth0_vlan: left promiscuous mode [ 290.491264][ T8210] team0 (unregistering): Port device team_slave_1 removed [ 290.534527][ T8210] team0 (unregistering): Port device team_slave_0 removed [ 291.012352][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.035243][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.054227][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.063263][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.082592][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.094914][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.340042][T12776] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1837'. [ 291.394327][T12781] lo speed is unknown, defaulting to 1000 [ 291.581418][T12791] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 291.599576][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1841'. [ 291.656831][T12765] lo speed is unknown, defaulting to 1000 [ 291.698693][T12795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 291.746284][T12786] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1841'. [ 291.772641][ T5843] Bluetooth: hci1: command tx timeout [ 292.025962][T12810] ip6t_rpfilter: unknown options [ 292.039328][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 292.060371][T12781] lo speed is unknown, defaulting to 1000 [ 292.172216][T12765] chnl_net:caif_netlink_parms(): no params data found [ 292.401880][ T8210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.568566][ T8210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.603919][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.612083][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.619539][T12765] bridge_slave_0: entered allmulticast mode [ 292.626930][T12765] bridge_slave_0: entered promiscuous mode [ 292.639771][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.652418][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.662724][T12765] bridge_slave_1: entered allmulticast mode [ 292.670251][T12765] bridge_slave_1: entered promiscuous mode [ 292.689823][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1852'. [ 292.724956][ T8210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.736550][T12834] xt_CT: No such helper "snmp" [ 292.864695][ T8210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.949802][T12834] lo speed is unknown, defaulting to 1000 [ 292.964309][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.002724][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.022352][T12781] chnl_net:caif_netlink_parms(): no params data found [ 293.122283][T12765] team0: Port device team_slave_0 added [ 293.165678][T12765] team0: Port device team_slave_1 added [ 293.206207][ T5843] Bluetooth: hci3: command tx timeout [ 293.234747][T12844] lo speed is unknown, defaulting to 1000 [ 293.295454][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.311007][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.364156][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.389050][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.405570][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.451342][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.477774][ T8210] bridge_slave_1: left allmulticast mode [ 293.483603][ T8210] bridge_slave_1: left promiscuous mode [ 293.496138][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.506397][ T8210] bridge_slave_0: left allmulticast mode [ 293.512084][ T8210] bridge_slave_0: left promiscuous mode [ 293.518004][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.590836][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 293.646168][T12853] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 293.657127][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1855'. [ 293.845428][ T5843] Bluetooth: hci1: command tx timeout [ 294.029916][ T8210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.044991][ T8210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.056733][ T8210] bond0 (unregistering): Released all slaves [ 294.068728][T12834] lo speed is unknown, defaulting to 1000 [ 294.280255][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.287975][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.295390][T12781] bridge_slave_0: entered allmulticast mode [ 294.302564][T12781] bridge_slave_0: entered promiscuous mode [ 294.330729][T12844] lo speed is unknown, defaulting to 1000 [ 294.352353][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.359949][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.367571][T12781] bridge_slave_1: entered allmulticast mode [ 294.374203][T12781] bridge_slave_1: entered promiscuous mode [ 294.394645][T12863] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 294.416335][T12765] hsr_slave_0: entered promiscuous mode [ 294.426693][T12765] hsr_slave_1: entered promiscuous mode [ 294.433569][T12765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.455519][T12765] Cannot create hsr debugfs directory [ 294.545571][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.573269][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1857'. [ 294.612313][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.791650][T12867] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1857'. [ 295.020017][T12781] team0: Port device team_slave_0 added [ 295.052753][T12781] team0: Port device team_slave_1 added [ 295.285295][ T5843] Bluetooth: hci3: command tx timeout [ 295.350397][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.375237][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.435465][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.493432][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.500804][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.533898][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.620976][ T8210] hsr_slave_0: left promiscuous mode [ 295.631587][ T8210] hsr_slave_1: left promiscuous mode [ 295.638777][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.646489][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.654527][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.662772][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.730671][ T8210] veth1_macvtap: left promiscuous mode [ 295.740065][ T8210] veth0_macvtap: left promiscuous mode [ 295.747139][ T8210] veth1_vlan: left promiscuous mode [ 295.753712][ T8210] veth0_vlan: left promiscuous mode [ 295.926267][ T5843] Bluetooth: hci1: command tx timeout [ 296.308469][ T8210] team0 (unregistering): Port device team_slave_1 removed [ 296.362273][ T8210] team0 (unregistering): Port device team_slave_0 removed [ 296.861417][T12887] __nla_validate_parse: 4 callbacks suppressed [ 296.861436][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1860'. [ 296.928724][T12781] hsr_slave_0: entered promiscuous mode [ 296.956544][T12781] hsr_slave_1: entered promiscuous mode [ 296.962850][T12781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.983830][T12781] Cannot create hsr debugfs directory [ 297.031544][T12893] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 297.307185][T12893] lo speed is unknown, defaulting to 1000 [ 297.365484][ T5843] Bluetooth: hci3: command tx timeout [ 297.506150][T12906] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1865'. [ 297.577530][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1865'. [ 297.616456][T12898] lo speed is unknown, defaulting to 1000 [ 298.015463][ T5843] Bluetooth: hci1: command tx timeout [ 298.153338][T12912] lo speed is unknown, defaulting to 1000 [ 298.153481][T12893] lo speed is unknown, defaulting to 1000 [ 299.445415][ T5843] Bluetooth: hci3: command tx timeout [ 300.220850][T12898] lo speed is unknown, defaulting to 1000 [ 300.352062][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'. [ 300.403664][T12912] lo speed is unknown, defaulting to 1000 [ 300.424915][T12917] ip6gre1: entered promiscuous mode [ 300.536072][T12917] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 301.050005][T12765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.108113][T12765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.124737][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 301.140893][T12765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.235467][T12765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.435766][T12781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.499141][T12781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.520372][T12781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.544537][T12781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.565708][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.603763][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.624120][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.631309][ T8202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.656012][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.663179][ T8202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.715774][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 301.740610][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 301.773688][T12937] netlink: 'syz.1.1873': attribute type 11 has an invalid length. [ 301.914841][T12781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.979376][T12781] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.016627][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.023771][ T8198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.038318][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.045546][ T8198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.248101][T12951] lo speed is unknown, defaulting to 1000 [ 302.357628][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.406504][T12781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.519880][T12781] veth0_vlan: entered promiscuous mode [ 302.566942][T12781] veth1_vlan: entered promiscuous mode [ 302.644409][T12781] veth0_macvtap: entered promiscuous mode [ 302.674040][T12781] veth1_macvtap: entered promiscuous mode [ 302.710659][T12781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.727382][T12781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.751716][T12781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.772131][T12781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.801109][T12781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.820712][T12781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.014740][ T8200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.041369][ T8200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.103064][T12765] veth0_vlan: entered promiscuous mode [ 303.129379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.152076][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.153831][T12765] veth1_vlan: entered promiscuous mode [ 303.245698][T12765] veth0_macvtap: entered promiscuous mode [ 303.277006][T12765] veth1_macvtap: entered promiscuous mode [ 303.312782][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.326947][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.346429][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.365802][T12951] lo speed is unknown, defaulting to 1000 [ 303.417759][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 303.427678][T12979] sit0: entered promiscuous mode [ 303.432877][T12979] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 303.484035][T12979] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1880'. [ 303.534430][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.555423][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 303.556003][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.582431][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.632400][T12981] batadv0 (unregistering): left promiscuous mode [ 303.657709][T12765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.667439][T12765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.678281][T12765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.718225][T12765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.744243][T12975] lo speed is unknown, defaulting to 1000 [ 304.129620][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.156013][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.192931][T12975] lo speed is unknown, defaulting to 1000 [ 304.240340][ T8210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.264620][ T8210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.334980][T12996] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1886'. [ 304.344649][T12996] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 304.385369][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1886'. [ 304.864716][ T8198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.236048][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1888'. [ 305.291890][T13005] lo speed is unknown, defaulting to 1000 [ 305.563627][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.575353][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.583559][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.592925][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.600595][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.608806][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.669144][ T8198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.705707][T13005] lo speed is unknown, defaulting to 1000 [ 305.733073][T13007] lo speed is unknown, defaulting to 1000 [ 305.822855][ T8198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.920921][ T8198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.941102][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 305.970400][T13009] lo speed is unknown, defaulting to 1000 [ 306.144789][T13006] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1889'. [ 306.157310][T13006] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.225425][T13007] lo speed is unknown, defaulting to 1000 [ 306.351264][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1891'. [ 306.409706][ T8198] bridge_slave_1: left allmulticast mode [ 306.425308][ T8198] bridge_slave_1: left promiscuous mode [ 306.431178][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.459566][ T8198] bridge_slave_0: left allmulticast mode [ 306.475842][ T8198] bridge_slave_0: left promiscuous mode [ 306.481633][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.569668][T13020] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1891'. [ 306.669484][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.680815][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.689828][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.698735][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.729503][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 306.743173][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.050831][ T8198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.061854][ T8198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.072284][ T8198] bond0 (unregistering): Released all slaves [ 307.107491][T13009] lo speed is unknown, defaulting to 1000 [ 307.237224][T13027] lo speed is unknown, defaulting to 1000 [ 307.519394][T13007] chnl_net:caif_netlink_parms(): no params data found [ 307.685492][ T5840] Bluetooth: hci1: command tx timeout [ 307.740195][T13027] lo speed is unknown, defaulting to 1000 [ 307.841954][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.872911][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.910278][T13007] bridge_slave_0: entered allmulticast mode [ 307.954366][T13007] bridge_slave_0: entered promiscuous mode [ 308.062594][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.070184][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.086003][T13007] bridge_slave_1: entered allmulticast mode [ 308.120074][T13007] bridge_slave_1: entered promiscuous mode [ 308.400714][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.433729][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.467399][ T8198] hsr_slave_0: left promiscuous mode [ 308.473413][ T8198] hsr_slave_1: left promiscuous mode [ 308.490896][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.504265][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.521584][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.542461][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.614906][ T8198] veth1_macvtap: left promiscuous mode [ 308.620660][ T8198] veth0_macvtap: left promiscuous mode [ 308.626492][ T8198] veth1_vlan: left promiscuous mode [ 308.632121][ T8198] veth0_vlan: left promiscuous mode [ 308.805346][ T5840] Bluetooth: hci3: command tx timeout [ 309.064705][T13065] __nla_validate_parse: 4 callbacks suppressed [ 309.064720][T13065] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1900'. [ 309.293421][ T8198] team0 (unregistering): Port device team_slave_1 removed [ 309.344036][ T8198] team0 (unregistering): Port device team_slave_0 removed [ 309.765383][ T5840] Bluetooth: hci1: command tx timeout [ 309.984702][T13068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'. [ 310.031443][T13007] team0: Port device team_slave_0 added [ 310.045559][T13007] team0: Port device team_slave_1 added [ 310.136927][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.143920][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.179736][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.262285][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 310.274791][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.286280][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.292215][T13089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1903'. [ 310.335965][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.422752][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1903'. [ 310.434197][T13089] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1903'. [ 310.531829][T13027] chnl_net:caif_netlink_parms(): no params data found [ 310.590077][T13007] hsr_slave_0: entered promiscuous mode [ 310.607000][T13007] hsr_slave_1: entered promiscuous mode [ 310.627281][T13007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.645665][T13007] Cannot create hsr debugfs directory [ 310.652123][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 310.712204][T13104] Bluetooth: MGMT ver 1.23 [ 310.718093][T13104] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1906'. [ 310.773460][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1906'. [ 310.885950][ T5840] Bluetooth: hci3: command tx timeout [ 310.903622][T13116] netlink: 'syz.1.1909': attribute type 9 has an invalid length. [ 310.912845][T13116] netlink: 'syz.1.1909': attribute type 6 has an invalid length. [ 310.919754][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.945687][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.973406][T13027] bridge_slave_0: entered allmulticast mode [ 310.996426][T13027] bridge_slave_0: entered promiscuous mode [ 311.036799][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.043951][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.054769][T13027] bridge_slave_1: entered allmulticast mode [ 311.062264][T13027] bridge_slave_1: entered promiscuous mode [ 311.199573][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.237572][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.448938][ T8198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.558627][T13027] team0: Port device team_slave_0 added [ 311.611049][ T8198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.662574][T13027] team0: Port device team_slave_1 added [ 311.693314][T13145] bridge4: entered promiscuous mode [ 311.704004][T13145] bridge4: entered allmulticast mode [ 311.713792][T13145] team0: Port device bridge4 added [ 311.730362][T13145] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 311.757527][ T8198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.801104][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.811775][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.845282][ T5840] Bluetooth: hci1: command tx timeout [ 311.851740][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.876281][T13145] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 311.889461][T13145] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 311.892853][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 311.908200][T13149] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 311.922142][T13145] team0: Port device netdevsim0 removed [ 311.952638][ T8198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.966899][T13149] nbd: socks must be embedded in a SOCK_ITEM attr [ 311.977801][T13149] block nbd1: shutting down sockets [ 311.983383][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.990558][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.019598][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.181793][T13153] openvswitch: netlink: Message has 8 unknown bytes. [ 312.191002][T13027] hsr_slave_0: entered promiscuous mode [ 312.212908][T13027] hsr_slave_1: entered promiscuous mode [ 312.240431][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.252351][T13027] Cannot create hsr debugfs directory [ 312.529473][T13169] nbd: socks must be embedded in a SOCK_ITEM attr [ 312.965501][ T5840] Bluetooth: hci3: command tx timeout [ 313.160224][ T8198] bridge_slave_1: left allmulticast mode [ 313.169186][ T8198] bridge_slave_1: left promiscuous mode [ 313.174968][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.199114][ T8198] bridge_slave_0: left allmulticast mode [ 313.204820][ T8198] bridge_slave_0: left promiscuous mode [ 313.211323][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.810380][ T8198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.827823][ T8198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.838140][ T8198] bond0 (unregistering): Released all slaves [ 313.935393][ T5840] Bluetooth: hci1: command tx timeout [ 314.030385][T13007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.165040][T13007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.176956][T13187] lo speed is unknown, defaulting to 1000 [ 314.188676][T13007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.213888][T13007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.652742][T13187] lo speed is unknown, defaulting to 1000 [ 314.718158][T13206] lo speed is unknown, defaulting to 1000 [ 314.746148][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.941488][T13027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.984751][T13027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.001780][T13027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.018207][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.037256][T13027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.045773][ T5840] Bluetooth: hci3: command tx timeout [ 315.068049][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.075205][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.197264][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.204487][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.398838][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.448748][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.484294][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.491457][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.523932][T13206] lo speed is unknown, defaulting to 1000 [ 315.549744][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.556924][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.858455][ T8198] hsr_slave_0: left promiscuous mode [ 315.864857][ T8198] hsr_slave_1: left promiscuous mode [ 315.871732][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.882445][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.893354][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.902158][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.930301][ T8198] veth1_macvtap: left promiscuous mode [ 315.936098][ T8198] veth0_macvtap: left promiscuous mode [ 315.941681][ T8198] veth1_vlan: left promiscuous mode [ 315.951032][ T8198] veth0_vlan: left promiscuous mode [ 316.438050][ T8198] team0 (unregistering): Port device team_slave_1 removed [ 316.480032][ T8198] team0 (unregistering): Port device team_slave_0 removed [ 316.973830][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.182733][T13222] __nla_validate_parse: 9 callbacks suppressed [ 317.182751][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 317.243955][T13007] veth0_vlan: entered promiscuous mode [ 317.284090][T13007] veth1_vlan: entered promiscuous mode [ 317.328093][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 317.528808][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.671640][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 317.682439][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.740145][T13007] veth0_macvtap: entered promiscuous mode [ 317.768105][T13007] veth1_macvtap: entered promiscuous mode [ 317.814534][T13007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.833632][T13007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.868082][T13007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.895689][T13007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.915800][T13007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.924630][T13007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.037244][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'. [ 318.208580][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.224644][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.270781][T13256] lo speed is unknown, defaulting to 1000 [ 318.313598][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.329008][T13027] veth0_vlan: entered promiscuous mode [ 318.356724][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.379323][T13027] veth1_vlan: entered promiscuous mode [ 318.437039][T13027] veth0_macvtap: entered promiscuous mode [ 318.468319][T13027] veth1_macvtap: entered promiscuous mode [ 318.526162][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.564674][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.588322][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.617845][T13270] netlink: 'syz.2.1943': attribute type 10 has an invalid length. [ 318.659292][T13268] team0: left allmulticast mode [ 318.664622][T13268] bridge0: port 1(team0) entered disabled state [ 318.735823][T13268] bond8: (slave batadv1): Releasing active interface [ 318.825668][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 318.905752][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.925202][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.936489][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.944814][T13272] lo speed is unknown, defaulting to 1000 [ 319.068616][T13027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.104972][T13027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.127849][T13027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.155342][T13027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.336985][ T1095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.407534][T13256] lo speed is unknown, defaulting to 1000 [ 319.600526][ T1095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.635994][ T8206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.640139][T13272] lo speed is unknown, defaulting to 1000 [ 319.643836][ T8206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.713207][ T1095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.780015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.793110][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.819302][ T1095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.302934][ T1095] bridge_slave_1: left allmulticast mode [ 320.322448][ T1095] bridge_slave_1: left promiscuous mode [ 320.335496][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.344689][ T1095] bridge_slave_0: left allmulticast mode [ 320.360959][ T1095] bridge_slave_0: left promiscuous mode [ 320.367042][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.883707][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.909912][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.926653][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.934716][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.962720][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 320.970354][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.985434][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.002311][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.014538][ T1095] bond0 (unregistering): Released all slaves [ 321.029647][T13291] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.103880][T13291] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.139114][T13292] lo speed is unknown, defaulting to 1000 [ 321.194462][T13291] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.348003][T13291] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.429071][T13292] lo speed is unknown, defaulting to 1000 [ 321.460992][T13291] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.479859][T13291] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.494833][T13291] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.531648][T13291] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.947518][ T1095] hsr_slave_0: left promiscuous mode [ 321.972795][ T1095] hsr_slave_1: left promiscuous mode [ 321.986936][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.994417][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.046452][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.053931][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.183310][ T1095] veth1_macvtap: left promiscuous mode [ 322.194762][ T1095] veth0_macvtap: left promiscuous mode [ 322.207425][ T1095] veth1_vlan: left promiscuous mode [ 322.219442][ T1095] veth0_vlan: left promiscuous mode [ 322.268375][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.283009][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.294640][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.303228][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.311177][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.318779][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.893614][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 322.955065][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 323.045316][ T5843] Bluetooth: hci1: command tx timeout [ 323.531013][T13292] chnl_net:caif_netlink_parms(): no params data found [ 323.581631][T13326] lo speed is unknown, defaulting to 1000 [ 323.827318][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.849587][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.875510][T13292] bridge_slave_0: entered allmulticast mode [ 323.893273][T13292] bridge_slave_0: entered promiscuous mode [ 323.917665][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.935387][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.942730][T13292] bridge_slave_1: entered allmulticast mode [ 323.987624][T13292] bridge_slave_1: entered promiscuous mode [ 324.019342][T13350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1960'. [ 324.092196][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.177616][T13348] lo speed is unknown, defaulting to 1000 [ 324.183553][T13326] lo speed is unknown, defaulting to 1000 [ 324.194423][T13355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1963'. [ 324.195817][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.405687][ T5843] Bluetooth: hci3: command tx timeout [ 324.418215][T13292] team0: Port device team_slave_0 added [ 324.457429][T13292] team0: Port device team_slave_1 added [ 324.559860][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1966'. [ 324.637558][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.654788][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.734845][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.767226][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.774221][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.834101][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.939124][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'. [ 324.973035][T13348] lo speed is unknown, defaulting to 1000 [ 325.048884][ T1095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.089736][T13292] hsr_slave_0: entered promiscuous mode [ 325.096747][T13292] hsr_slave_1: entered promiscuous mode [ 325.103021][T13292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.111290][T13292] Cannot create hsr debugfs directory [ 325.121787][T13383] lo speed is unknown, defaulting to 1000 [ 325.128282][ T5843] Bluetooth: hci1: command tx timeout [ 325.260478][ T1095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.395753][ T1095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.557693][ T1095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.575943][T13383] lo speed is unknown, defaulting to 1000 [ 325.588309][T13326] chnl_net:caif_netlink_parms(): no params data found [ 326.022920][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.032277][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.039718][T13326] bridge_slave_0: entered allmulticast mode [ 326.047300][T13326] bridge_slave_0: entered promiscuous mode [ 326.074204][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.099791][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.110636][T13326] bridge_slave_1: entered allmulticast mode [ 326.118364][T13326] bridge_slave_1: entered promiscuous mode [ 326.164315][ T1095] bridge_slave_1: left allmulticast mode [ 326.180858][ T1095] bridge_slave_1: left promiscuous mode [ 326.196299][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.215626][ T1095] bridge_slave_0: left allmulticast mode [ 326.221328][ T1095] bridge_slave_0: left promiscuous mode [ 326.227389][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.495243][ T5843] Bluetooth: hci3: command tx timeout [ 326.785308][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.798214][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.817488][ T1095] bond0 (unregistering): Released all slaves [ 326.855569][T13423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1980'. [ 326.884143][T13426] lo speed is unknown, defaulting to 1000 [ 326.923313][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.967793][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.206987][ T5843] Bluetooth: hci1: command tx timeout [ 327.212254][T13326] team0: Port device team_slave_0 added [ 327.234525][T13326] team0: Port device team_slave_1 added [ 327.426561][T13426] lo speed is unknown, defaulting to 1000 [ 327.432300][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.444058][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.471712][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.483462][T13292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.529214][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.540728][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.583984][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.595814][T13292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.775301][T13292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.826869][T13454] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1987'. [ 327.877845][T13326] hsr_slave_0: entered promiscuous mode [ 327.884012][T13326] hsr_slave_1: entered promiscuous mode [ 327.900802][T13326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.916169][T13326] Cannot create hsr debugfs directory [ 327.924765][T13292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.950601][ T1095] hsr_slave_0: left promiscuous mode [ 327.963363][ T1095] hsr_slave_1: left promiscuous mode [ 327.977083][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.984733][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.993523][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.001352][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.031233][ T1095] veth1_macvtap: left promiscuous mode [ 328.037954][ T1095] veth0_macvtap: left promiscuous mode [ 328.043632][ T1095] veth1_vlan: left promiscuous mode [ 328.049776][ T1095] veth0_vlan: left promiscuous mode [ 328.505077][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 328.554763][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 328.574351][ T5843] Bluetooth: hci3: command tx timeout [ 329.114170][T13458] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1989'. [ 329.124377][T13458] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 329.294842][ T5843] Bluetooth: hci1: command tx timeout [ 329.684405][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.752737][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.824961][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.832146][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.947972][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.955240][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.388207][T13326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.433841][T13326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.478564][T13326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.503783][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.522318][T13326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.551861][T13503] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2001'. [ 330.569257][T13503] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 330.581910][T13507] FAULT_INJECTION: forcing a failure. [ 330.581910][T13507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 330.645955][ T5843] Bluetooth: hci3: command tx timeout [ 330.656262][T13507] CPU: 1 UID: 0 PID: 13507 Comm: syz.3.2002 Not tainted 6.14.0-rc3-syzkaller-00703-ge13b6da7045f #0 [ 330.656286][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.656297][T13507] Call Trace: [ 330.656302][T13507] [ 330.656309][T13507] dump_stack_lvl+0x241/0x360 [ 330.656336][T13507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.656353][T13507] ? __pfx__printk+0x10/0x10 [ 330.656380][T13507] should_fail_ex+0x40a/0x550 [ 330.656405][T13507] prepare_alloc_pages+0x1da/0x5b0 [ 330.656431][T13507] __alloc_frozen_pages_noprof+0x16f/0x710 [ 330.656453][T13507] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 330.656483][T13507] ? validate_chain+0x11e/0x5920 [ 330.656505][T13507] alloc_pages_mpol+0x311/0x660 [ 330.656530][T13507] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 330.656551][T13507] ? __lock_acquire+0x1397/0x2100 [ 330.656579][T13507] alloc_pages_noprof+0x121/0x190 [ 330.656602][T13507] __pud_alloc+0x91/0x2b0 [ 330.656625][T13507] ? __pfx___pud_alloc+0x10/0x10 [ 330.656644][T13507] ? __pfx_validate_chain+0x10/0x10 [ 330.656676][T13507] __handle_mm_fault+0x495f/0x70f0 [ 330.656696][T13507] ? mark_lock+0x9a/0x360 [ 330.656717][T13507] ? __lock_acquire+0x1397/0x2100 [ 330.656757][T13507] ? __pfx___handle_mm_fault+0x10/0x10 [ 330.656789][T13507] ? mt_find+0x2a9/0x920 [ 330.656809][T13507] ? __pfx_lock_release+0x10/0x10 [ 330.656843][T13507] ? mt_find+0x2a9/0x920 [ 330.656864][T13507] ? mt_find+0x6c8/0x920 [ 330.656882][T13507] ? mt_find+0x2a9/0x920 [ 330.656906][T13507] ? __pfx_mt_find+0x10/0x10 [ 330.656943][T13507] ? find_vma+0xf9/0x170 [ 330.656963][T13507] ? __pfx_find_vma+0x10/0x10 [ 330.656982][T13507] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.657005][T13507] handle_mm_fault+0x3e5/0x8d0 [ 330.657036][T13507] exc_page_fault+0x2b9/0x8b0 [ 330.657060][T13507] asm_exc_page_fault+0x26/0x30 [ 330.657079][T13507] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 330.657096][T13507] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 330.657110][T13507] RSP: 0018:ffffc90003c9fd50 EFLAGS: 00050202 [ 330.657126][T13507] RAX: 00007ffffffff001 RBX: 0000400000001080 RCX: 000000000000000a [ 330.657138][T13507] RDX: 0000000000000001 RSI: 0000400000001080 RDI: ffffc90003c9fde0 [ 330.657149][T13507] RBP: 000000000000000a R08: ffffc90003c9fde9 R09: 1ffff92000793fbd [ 330.657160][T13507] R10: dffffc0000000000 R11: fffff52000793fbe R12: 0000400000001080 [ 330.657172][T13507] R13: ffff8880339d21c0 R14: ffffc90003c9fde0 R15: 000000000000000a [ 330.657199][T13507] _copy_from_user+0x7b/0xb0 [ 330.657220][T13507] move_addr_to_kernel+0x82/0x150 [ 330.657240][T13507] __sys_connect+0xb6/0x2d0 [ 330.657263][T13507] ? __pfx___sys_connect+0x10/0x10 [ 330.657297][T13507] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.657320][T13507] ? do_syscall_64+0x100/0x230 [ 330.657344][T13507] __x64_sys_connect+0x7a/0x90 [ 330.657365][T13507] do_syscall_64+0xf3/0x230 [ 330.657385][T13507] ? clear_bhb_loop+0x35/0x90 [ 330.657408][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.657428][T13507] RIP: 0033:0x7f038278d169 [ 330.657442][T13507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.657455][T13507] RSP: 002b:00007f0383536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 330.657472][T13507] RAX: ffffffffffffffda RBX: 00007f03829a5fa0 RCX: 00007f038278d169 [ 330.657484][T13507] RDX: 000000000000000a RSI: 0000400000001080 RDI: 0000000000000004 [ 330.657494][T13507] RBP: 00007f0383536090 R08: 0000000000000000 R09: 0000000000000000 [ 330.657505][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.657515][T13507] R13: 0000000000000000 R14: 00007f03829a5fa0 R15: 00007fff5caca288 [ 330.657542][T13507] [ 330.716055][T13292] veth0_vlan: entered promiscuous mode [ 331.114680][T13292] veth1_vlan: entered promiscuous mode [ 331.228832][T13292] veth0_macvtap: entered promiscuous mode [ 331.259212][T13292] veth1_macvtap: entered promiscuous mode [ 331.321159][T13292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.369597][T13292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.387854][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.428832][T13524] tipc: Failed to remove unknown binding: 66,1,1/0:2596983447/2596983449 [ 331.431773][T13292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.452317][T13524] tipc: Failed to remove unknown binding: 66,1,1/0:2596983447/2596983449 [ 331.453183][T13292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.470205][T13292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.479252][T13292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.506075][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.561714][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.568896][ T8198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.612008][T13527] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2008'. [ 331.638860][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.646050][ T8198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.702488][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2007'. [ 331.905474][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.914170][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.976562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.984445][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.008176][T13545] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2013'. [ 332.029538][T13545] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 332.055826][T13548] FAULT_INJECTION: forcing a failure. [ 332.055826][T13548] name failslab, interval 1, probability 0, space 0, times 0 [ 332.113993][T13548] CPU: 0 UID: 0 PID: 13548 Comm: syz.3.2014 Not tainted 6.14.0-rc3-syzkaller-00703-ge13b6da7045f #0 [ 332.114018][T13548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.114027][T13548] Call Trace: [ 332.114032][T13548] [ 332.114039][T13548] dump_stack_lvl+0x241/0x360 [ 332.114064][T13548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.114080][T13548] ? __pfx__printk+0x10/0x10 [ 332.114098][T13548] ? __kmalloc_noprof+0xb5/0x4c0 [ 332.114118][T13548] ? __pfx___might_resched+0x10/0x10 [ 332.114141][T13548] should_fail_ex+0x40a/0x550 [ 332.114164][T13548] should_failslab+0xac/0x100 [ 332.114183][T13548] __kmalloc_noprof+0xdd/0x4c0 [ 332.114200][T13548] ? fib_nl2rule+0x322/0x1a40 [ 332.114221][T13548] fib_nl2rule+0x322/0x1a40 [ 332.114240][T13548] ? __pfx_lock_release+0x10/0x10 [ 332.114262][T13548] ? __pfx_fib_nl2rule+0x10/0x10 [ 332.114288][T13548] ? __nla_parse+0x40/0x60 [ 332.114305][T13548] fib_newrule+0x302/0xfd0 [ 332.114330][T13548] ? __pfx_fib_newrule+0x10/0x10 [ 332.114379][T13548] ? __pfx_fib_nl_newrule+0x10/0x10 [ 332.114398][T13548] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.114413][T13548] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 332.114429][T13548] ? __lock_acquire+0x1397/0x2100 [ 332.114451][T13548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.114482][T13548] netlink_rcv_skb+0x206/0x480 [ 332.114500][T13548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.114519][T13548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.114555][T13548] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.114574][T13548] netlink_unicast+0x7f6/0x990 [ 332.114603][T13548] ? __pfx_netlink_unicast+0x10/0x10 [ 332.114622][T13548] ? __virt_addr_valid+0x45f/0x530 [ 332.114639][T13548] ? __phys_addr_symbol+0x2f/0x70 [ 332.114661][T13548] ? __check_object_size+0x47a/0x730 [ 332.114683][T13548] netlink_sendmsg+0x8de/0xcb0 [ 332.114710][T13548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.114729][T13548] ? aa_sock_msg_perm+0x91/0x160 [ 332.114756][T13548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.114771][T13548] __sock_sendmsg+0x221/0x270 [ 332.114792][T13548] ____sys_sendmsg+0x53a/0x860 [ 332.114821][T13548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.114841][T13548] ? __fget_files+0x2a/0x410 [ 332.114864][T13548] ? __fget_files+0x2a/0x410 [ 332.114891][T13548] __sys_sendmsg+0x269/0x350 [ 332.114916][T13548] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.114948][T13548] ? do_sys_openat2+0x17a/0x1d0 [ 332.114994][T13548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.115017][T13548] ? do_syscall_64+0x100/0x230 [ 332.115038][T13548] ? do_syscall_64+0xb6/0x230 [ 332.115059][T13548] do_syscall_64+0xf3/0x230 [ 332.115078][T13548] ? clear_bhb_loop+0x35/0x90 [ 332.115100][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.115125][T13548] RIP: 0033:0x7f038278d169 [ 332.115138][T13548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.115150][T13548] RSP: 002b:00007f0383536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.115168][T13548] RAX: ffffffffffffffda RBX: 00007f03829a5fa0 RCX: 00007f038278d169 [ 332.115179][T13548] RDX: 0000000004008040 RSI: 0000400000000600 RDI: 0000000000000003 [ 332.115189][T13548] RBP: 00007f0383536090 R08: 0000000000000000 R09: 0000000000000000 [ 332.115198][T13548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.115207][T13548] R13: 0000000000000000 R14: 00007f03829a5fa0 R15: 00007fff5caca288 [ 332.115231][T13548] [ 332.124253][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.914289][T13589] netlink: 'syz.2.2023': attribute type 1 has an invalid length. [ 332.922953][T13589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2023'. [ 332.944349][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 333.017763][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2024'. [ 333.089972][T13326] veth0_vlan: entered promiscuous mode [ 333.117162][T13326] veth1_vlan: entered promiscuous mode [ 333.162466][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 333.187528][T13326] veth0_macvtap: entered promiscuous mode [ 333.206196][T13326] veth1_macvtap: entered promiscuous mode [ 333.212890][T13605] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2026'. [ 333.218200][T13601] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.223987][T13605] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 333.263694][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.287718][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.304118][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.313626][T13603] dummy0: left promiscuous mode [ 333.319145][T13603] dummy0: left allmulticast mode [ 333.349718][T13603] team0: Port device dummy0 removed [ 333.403442][T13603] : (slave bond_slave_0): Releasing backup interface [ 333.457951][T13603] : (slave bond_slave_1): Releasing backup interface [ 333.486746][T13603] team_slave_0: left promiscuous mode [ 333.497334][T13603] team_slave_0: left allmulticast mode [ 333.503644][T13603] team0: Failed to send options change via netlink (err -105) [ 333.512140][T13603] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 333.521935][T13603] team0: Port device team_slave_0 removed [ 333.528843][T13603] team_slave_1: left promiscuous mode [ 333.534482][T13603] team_slave_1: left allmulticast mode [ 333.544486][T13603] team0: Failed to send options change via netlink (err -105) [ 333.554280][T13603] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 333.564432][T13603] team0: Port device team_slave_1 removed [ 333.572930][T13603] bond2: (slave batadv0): Releasing active interface [ 333.579885][T13603] bond2: (slave batadv0): the permanent HWaddr of slave - e2:bd:57:92:b5:c2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 333.598234][T13603] bond2: (slave batadv1): making interface the new active one [ 333.635101][T13603] bond2: (slave batadv1): Releasing active interface [ 333.656040][T13603] bond2: (slave veth3): Releasing active interface [ 333.684102][T13603] bond4: (slave batadv2): Releasing active interface [ 333.696050][T13603] bond6: (slave batadv3): Releasing active interface [ 333.706374][T13603] bridge3: left promiscuous mode [ 333.711616][T13603] bridge3: left allmulticast mode [ 333.725217][T13603] team0: Failed to send options change via netlink (err -105) [ 333.733677][T13603] team0: Failed to send port change of device bridge3 via netlink (err -105) [ 333.743059][T13603] team0: Port device bridge3 removed [ 333.751039][T13603] bond11: (slave batadv4): Releasing active interface [ 333.760818][T13603] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 333.768309][T13603] batman_adv: batadv0: Removing interface: ip6gretap2 [ 333.779596][T13603] team0: Failed to send options change via netlink (err -105) [ 333.788257][T13603] team0: Failed to send port change of device bridge4 via netlink (err -105) [ 333.798575][T13603] team0: Port device bridge4 removed [ 333.866470][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.892344][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.903877][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.944610][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.984000][T13326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.993221][T13326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.002123][T13326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.010902][T13326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.063229][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.105894][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.113738][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.141076][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.180300][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.192542][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.223771][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.382788][ T1139] bridge_slave_1: left allmulticast mode [ 334.388638][ T1139] bridge_slave_1: left promiscuous mode [ 334.394454][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.403012][ T1139] bridge_slave_0: left allmulticast mode [ 334.409085][ T1139] bridge_slave_0: left promiscuous mode [ 334.414804][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.780520][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.796644][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.808631][ T1139] bond0 (unregistering): Released all slaves [ 335.350013][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.359616][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.369187][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.378482][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.396085][ T1139] hsr_slave_0: left promiscuous mode [ 335.396085][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.410360][ T1139] hsr_slave_1: left promiscuous mode [ 335.419876][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.453214][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.461015][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.480644][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.488396][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.514201][ T1139] veth1_macvtap: left promiscuous mode [ 335.520075][ T1139] veth0_macvtap: left promiscuous mode [ 335.525945][ T1139] veth1_vlan: left promiscuous mode [ 335.531204][ T1139] veth0_vlan: left promiscuous mode [ 335.992010][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 336.035028][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 336.421048][T13651] FAULT_INJECTION: forcing a failure. [ 336.421048][T13651] name failslab, interval 1, probability 0, space 0, times 0 [ 336.434657][T13651] CPU: 0 UID: 0 PID: 13651 Comm: syz.2.2037 Not tainted 6.14.0-rc3-syzkaller-00703-ge13b6da7045f #0 [ 336.434683][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.434693][T13651] Call Trace: [ 336.434700][T13651] [ 336.434706][T13651] dump_stack_lvl+0x241/0x360 [ 336.434732][T13651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.434750][T13651] ? __pfx__printk+0x10/0x10 [ 336.434769][T13651] ? kmem_cache_alloc_noprof+0x48/0x380 [ 336.434791][T13651] ? __pfx___might_resched+0x10/0x10 [ 336.434809][T13651] ? alloc_pages_mpol+0x4bd/0x660 [ 336.434835][T13651] should_fail_ex+0x40a/0x550 [ 336.434860][T13651] should_failslab+0xac/0x100 [ 336.434882][T13651] ? __pmd_alloc+0x111/0x420 [ 336.434909][T13651] kmem_cache_alloc_noprof+0x70/0x380 [ 336.434936][T13651] __pmd_alloc+0x111/0x420 [ 336.434960][T13651] ? __pfx___pmd_alloc+0x10/0x10 [ 336.434982][T13651] ? __pfx_validate_chain+0x10/0x10 [ 336.435007][T13651] __handle_mm_fault+0xd34/0x70f0 [ 336.435028][T13651] ? mark_lock+0x9a/0x360 [ 336.435070][T13651] ? __pfx___handle_mm_fault+0x10/0x10 [ 336.435103][T13651] ? mt_find+0x2a9/0x920 [ 336.435127][T13651] ? __pfx_lock_release+0x10/0x10 [ 336.435156][T13651] ? mt_find+0x2a9/0x920 [ 336.435176][T13651] ? mt_find+0x6c8/0x920 [ 336.435195][T13651] ? mt_find+0x2a9/0x920 [ 336.435220][T13651] ? __pfx_mt_find+0x10/0x10 [ 336.435259][T13651] ? find_vma+0xf9/0x170 [ 336.435280][T13651] ? __pfx_find_vma+0x10/0x10 [ 336.435300][T13651] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.435326][T13651] handle_mm_fault+0x3e5/0x8d0 [ 336.435358][T13651] exc_page_fault+0x2b9/0x8b0 [ 336.435385][T13651] asm_exc_page_fault+0x26/0x30 [ 336.435404][T13651] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 336.435422][T13651] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 336.435436][T13651] RSP: 0018:ffffc9000417fd50 EFLAGS: 00050202 [ 336.435451][T13651] RAX: 00007ffffffff001 RBX: 0000400000001080 RCX: 000000000000000a [ 336.435463][T13651] RDX: 0000000000000001 RSI: 0000400000001080 RDI: ffffc9000417fde0 [ 336.435475][T13651] RBP: 000000000000000a R08: ffffc9000417fde9 R09: 1ffff9200082ffbd [ 336.435486][T13651] R10: dffffc0000000000 R11: fffff5200082ffbe R12: 0000400000001080 [ 336.435498][T13651] R13: ffff88802f0ed500 R14: ffffc9000417fde0 R15: 000000000000000a [ 336.435526][T13651] _copy_from_user+0x7b/0xb0 [ 336.435547][T13651] move_addr_to_kernel+0x82/0x150 [ 336.435568][T13651] __sys_connect+0xb6/0x2d0 [ 336.435589][T13651] ? __pfx___sys_connect+0x10/0x10 [ 336.435618][T13651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.435641][T13651] ? do_syscall_64+0x100/0x230 [ 336.435665][T13651] __x64_sys_connect+0x7a/0x90 [ 336.435686][T13651] do_syscall_64+0xf3/0x230 [ 336.435706][T13651] ? clear_bhb_loop+0x35/0x90 [ 336.435729][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.435748][T13651] RIP: 0033:0x7efd3198d169 [ 336.435763][T13651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.435777][T13651] RSP: 002b:00007efd32746038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 336.435793][T13651] RAX: ffffffffffffffda RBX: 00007efd31ba5fa0 RCX: 00007efd3198d169 [ 336.435805][T13651] RDX: 000000000000000a RSI: 0000400000001080 RDI: 0000000000000004 [ 336.435815][T13651] RBP: 00007efd32746090 R08: 0000000000000000 R09: 0000000000000000 [ 336.435825][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.435835][T13651] R13: 0000000000000000 R14: 00007efd31ba5fa0 R15: 00007ffec82cef28 [ 336.435863][T13651] [ 336.838902][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.848483][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.857320][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.878458][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.895941][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.903314][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.064612][T13660] __nla_validate_parse: 1 callbacks suppressed [ 337.064633][T13660] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2038'. [ 337.080643][T13660] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 337.215353][T13659] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2039'. [ 337.224519][T13659] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 337.293061][T13652] lo speed is unknown, defaulting to 1000 [ 337.526559][ T5840] Bluetooth: hci1: command tx timeout [ 337.573818][T13635] lo speed is unknown, defaulting to 1000 [ 337.635349][T13675] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 337.651142][T13675] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2042'. [ 337.660609][T13675] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 337.676256][T13675] netlink: 'syz.3.2042': attribute type 2 has an invalid length. [ 337.698962][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'. [ 337.909772][ T1139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.932999][T13652] lo speed is unknown, defaulting to 1000 [ 337.964512][T13682] 8021q: adding VLAN 0 to HW filter on device bond12 [ 337.974459][T13682] bond0: (slave bond12): Enslaving as an active interface with an up link [ 338.120991][T13635] lo speed is unknown, defaulting to 1000 [ 338.176901][ T1139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.231766][T13688] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2046'. [ 338.246260][T13688] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2046'. [ 338.423534][ T1139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.499415][T13691] batadv_slave_0: entered promiscuous mode [ 338.574084][ T1139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.876924][T13635] chnl_net:caif_netlink_parms(): no params data found [ 338.965774][ T5840] Bluetooth: hci3: command tx timeout [ 339.008325][T13702] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2049'. [ 339.171149][ T1139] bridge_slave_1: left allmulticast mode [ 339.192751][ T1139] bridge_slave_1: left promiscuous mode [ 339.204141][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.220231][ T1139] bridge_slave_0: left allmulticast mode [ 339.252889][ T1139] bridge_slave_0: left promiscuous mode [ 339.270135][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.605430][ T5840] Bluetooth: hci1: command tx timeout [ 339.759313][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.771061][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.781773][ T1139] bond0 (unregistering): Released all slaves [ 339.796154][T13635] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.803522][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.828511][T13635] bridge_slave_0: entered allmulticast mode [ 339.835381][T13635] bridge_slave_0: entered promiscuous mode [ 339.852317][T13635] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.860520][T13635] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.867932][T13635] bridge_slave_1: entered allmulticast mode [ 339.874841][T13635] bridge_slave_1: entered promiscuous mode [ 339.920649][T13713] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2051'. [ 339.930534][T13713] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 339.948292][T13652] chnl_net:caif_netlink_parms(): no params data found [ 340.063494][T13715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.064246][T13635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.309386][T13635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.348883][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 340.696526][T13635] team0: Port device team_slave_0 added [ 340.797070][T13742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2056'. [ 340.851671][T13635] team0: Port device team_slave_1 added [ 340.939646][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.972240][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.995638][T13652] bridge_slave_0: entered allmulticast mode [ 341.003942][T13652] bridge_slave_0: entered promiscuous mode [ 341.029614][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.040979][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.051344][ T5840] Bluetooth: hci3: command tx timeout [ 341.065582][T13652] bridge_slave_1: entered allmulticast mode [ 341.078057][T13652] bridge_slave_1: entered promiscuous mode [ 341.237454][ T1139] hsr_slave_0: left promiscuous mode [ 341.247321][ T1139] hsr_slave_1: left promiscuous mode [ 341.255853][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.263702][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.279843][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.295398][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.327762][ T1139] veth1_macvtap: left promiscuous mode [ 341.333535][ T1139] veth0_macvtap: left promiscuous mode [ 341.339854][ T1139] veth1_vlan: left promiscuous mode [ 341.346747][ T1139] veth0_vlan: left promiscuous mode [ 341.689901][ T5840] Bluetooth: hci1: command tx timeout [ 341.867264][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 341.921008][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 342.423856][T13652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.454039][T13635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.475327][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.513533][T13635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.531279][T13635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.542655][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.571051][T13635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.588179][T13652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.689979][T13766] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 342.796675][T13652] team0: Port device team_slave_0 added [ 342.835927][T13635] hsr_slave_0: entered promiscuous mode [ 342.842233][T13635] hsr_slave_1: entered promiscuous mode [ 342.882300][T13782] __nla_validate_parse: 1 callbacks suppressed [ 342.882317][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 342.883531][T13635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.906051][T13782] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 342.955051][T13635] Cannot create hsr debugfs directory [ 342.979180][T13652] team0: Port device team_slave_1 added [ 343.023096][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 343.032601][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2066'. [ 343.068590][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2066'. [ 343.087697][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 343.126343][ T5840] Bluetooth: hci3: command tx timeout [ 343.133831][T13790] bond0 (unregistering): (slave bond12): Releasing backup interface [ 343.152097][T13790] bond0 (unregistering): Released all slaves [ 343.164702][T13793] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2068'. [ 343.183886][T13652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.201648][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.211423][T13795] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2069'. [ 343.242751][T13652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.307503][T13652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.314500][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.350451][T13652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.633265][T13652] hsr_slave_0: entered promiscuous mode [ 343.653723][T13652] hsr_slave_1: entered promiscuous mode [ 343.668261][T13652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.683386][T13652] Cannot create hsr debugfs directory [ 343.696199][T13807] team0: Mode changed to "loadbalance" [ 343.714423][T13814] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2074'. [ 343.756456][T13818] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2075'. [ 343.770883][ T5840] Bluetooth: hci1: command tx timeout [ 344.003357][T13822] lo speed is unknown, defaulting to 1000 [ 344.579427][T13635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.614464][T13635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.708828][T13635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.741194][T13635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.843270][T13822] lo speed is unknown, defaulting to 1000 [ 344.901444][T13858] lo speed is unknown, defaulting to 1000 [ 344.924877][T13853] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2083'. [ 345.135031][T13635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.189607][T13635] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.207813][ T5840] Bluetooth: hci3: command tx timeout [ 345.215315][T13865] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 345.240886][T13865] bond9: entered promiscuous mode [ 345.247897][T13865] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.284137][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.291284][ T8198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.346151][T13865] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.353189][T13865] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 345.376878][T13865] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 345.389249][T13865] bond9: (slave ip6gre2): making interface the new active one [ 345.397744][T13865] ip6gre2: entered promiscuous mode [ 345.405683][T13865] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 345.426383][T13652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.449706][T13652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.534430][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.541627][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.570853][T13652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.597722][T13652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.637247][T13858] lo speed is unknown, defaulting to 1000 [ 345.930320][T13652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.008529][T13652] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.042820][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.050026][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.118702][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.125885][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.216479][T13635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.378833][T13635] veth0_vlan: entered promiscuous mode [ 346.425393][T13635] veth1_vlan: entered promiscuous mode [ 346.507634][T13635] veth0_macvtap: entered promiscuous mode [ 346.537773][T13635] veth1_macvtap: entered promiscuous mode [ 346.603674][T13652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.631108][T13635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.688585][T13635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.718578][T13635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.755365][T13635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.764115][T13635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.793409][T13635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.017826][ T8208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.032607][ T8208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.105744][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.117885][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.158325][T13652] veth0_vlan: entered promiscuous mode [ 347.197562][T13652] veth1_vlan: entered promiscuous mode [ 347.246929][T13652] veth0_macvtap: entered promiscuous mode [ 347.258871][T13652] veth1_macvtap: entered promiscuous mode [ 347.278845][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.290087][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.301965][T13652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.366334][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.382681][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.393610][T13652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.410648][T13652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.419585][T13652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.428588][T13652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.438184][T13652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.572000][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.587070][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.623363][ T8208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.632584][ T8208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.910130][T13919] team0 (unregistering): left allmulticast mode [ 347.945705][T13919] team0 (unregistering): left promiscuous mode [ 348.042266][T13930] __nla_validate_parse: 2 callbacks suppressed [ 348.042283][T13930] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2099'. [ 348.098705][T13929] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2099'. [ 348.258744][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.399969][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.455221][ T29] audit: type=1800 audit(1740415596.835:7): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2100" name="memory.events" dev="tmpfs" ino=2740 res=0 errno=0 [ 348.942399][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 349.007240][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.112475][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.183085][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.206188][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.227865][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.249986][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.259141][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.262275][ T35] bridge_slave_1: left allmulticast mode [ 349.267809][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.272616][ T35] bridge_slave_1: left promiscuous mode [ 349.285952][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.301142][ T35] bridge_slave_0: left allmulticast mode [ 349.306892][ T35] bridge_slave_0: left promiscuous mode [ 349.312588][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.658843][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.669682][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.683324][ T35] bond0 (unregistering): Released all slaves [ 349.714784][T13950] lo speed is unknown, defaulting to 1000 [ 349.941080][T13950] lo speed is unknown, defaulting to 1000 [ 350.259636][ T35] hsr_slave_0: left promiscuous mode [ 350.271462][ T35] hsr_slave_1: left promiscuous mode [ 350.284531][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.298758][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.313391][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.338497][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.418262][ T35] veth1_macvtap: left promiscuous mode [ 350.423862][ T35] veth0_macvtap: left promiscuous mode [ 350.435533][ T35] veth1_vlan: left promiscuous mode [ 350.440882][ T35] veth0_vlan: left promiscuous mode [ 350.579794][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.595225][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.603838][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.616949][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.638718][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 350.661672][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.152407][ T35] team0 (unregistering): Port device team_slave_1 removed [ 351.201393][ T35] team0 (unregistering): Port device team_slave_0 removed [ 351.366588][ T5840] Bluetooth: hci1: command tx timeout [ 351.653348][T13950] chnl_net:caif_netlink_parms(): no params data found [ 351.670570][T13965] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 351.687182][T13967] lo speed is unknown, defaulting to 1000 [ 351.710799][T13965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2106'. [ 351.745617][T13965] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 351.822127][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 351.972958][T13958] lo speed is unknown, defaulting to 1000 [ 351.994395][T13950] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.011826][T13950] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.027167][T13950] bridge_slave_0: entered allmulticast mode [ 352.043644][T13950] bridge_slave_0: entered promiscuous mode [ 352.062406][T13950] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.077678][T13950] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.094262][T13950] bridge_slave_1: entered allmulticast mode [ 352.110578][T13950] bridge_slave_1: entered promiscuous mode [ 352.249987][T13950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.272693][T13984] bridge6: entered promiscuous mode [ 352.281195][T13984] bridge6: entered allmulticast mode [ 352.288772][T13967] lo speed is unknown, defaulting to 1000 [ 352.297122][T13950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.337320][T13985] tun0: tun_chr_ioctl cmd 1074025677 [ 352.342738][T13985] tun0: linktype set to 776 [ 352.401938][T13950] team0: Port device team_slave_0 added [ 352.433917][T13950] team0: Port device team_slave_1 added [ 352.489764][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.520593][T13958] lo speed is unknown, defaulting to 1000 [ 352.533185][T13987] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 352.542392][T13950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.554996][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.583046][T13950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.598016][T13950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.605335][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.634285][T13950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.709254][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.726967][ T5840] Bluetooth: hci3: command tx timeout [ 352.799282][T13992] bond10: entered promiscuous mode [ 352.804470][T13992] bond10: entered allmulticast mode [ 352.811551][T13992] 8021q: adding VLAN 0 to HW filter on device bond10 [ 352.860633][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.915659][T13950] hsr_slave_0: entered promiscuous mode [ 352.922070][T13950] hsr_slave_1: entered promiscuous mode [ 352.937275][T13950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.944914][T13950] Cannot create hsr debugfs directory [ 352.955203][T14004] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2113'. [ 353.017169][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.221043][T14008] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 353.249338][T14011] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 353.346201][T14010] lo speed is unknown, defaulting to 1000 [ 353.445914][ T5840] Bluetooth: hci1: command tx timeout [ 353.618682][T13967] chnl_net:caif_netlink_parms(): no params data found [ 353.707942][ T35] bridge_slave_1: left allmulticast mode [ 353.714649][ T35] bridge_slave_1: left promiscuous mode [ 353.764599][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.784337][ T35] bridge_slave_0: left allmulticast mode [ 353.799637][ T35] bridge_slave_0: left promiscuous mode [ 353.810724][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.194876][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.206571][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.217434][ T35] bond0 (unregistering): Released all slaves [ 354.264544][T14010] lo speed is unknown, defaulting to 1000 [ 354.508896][T13967] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.520749][T13967] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.529861][T13967] bridge_slave_0: entered allmulticast mode [ 354.537226][T13967] bridge_slave_0: entered promiscuous mode [ 354.617334][T13967] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.624669][T13967] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.651136][T13967] bridge_slave_1: entered allmulticast mode [ 354.660188][T13967] bridge_slave_1: entered promiscuous mode [ 354.815813][ T5840] Bluetooth: hci3: command tx timeout [ 354.862513][T13967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.904282][T13967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.931300][T14041] syzkaller1: entered promiscuous mode [ 354.937422][T14041] syzkaller1: entered allmulticast mode [ 355.206535][T13967] team0: Port device team_slave_0 added [ 355.234760][T13967] team0: Port device team_slave_1 added [ 355.285035][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 355.323237][T13967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.332786][T13967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.365184][T13967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.399933][ T35] hsr_slave_0: left promiscuous mode [ 355.412025][ T35] hsr_slave_1: left promiscuous mode [ 355.417892][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.425697][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.439148][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.448699][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.478063][ T35] veth1_macvtap: left promiscuous mode [ 355.483670][ T35] veth0_macvtap: left promiscuous mode [ 355.489371][ T35] veth1_vlan: left promiscuous mode [ 355.494735][ T35] veth0_vlan: left promiscuous mode [ 355.535476][ T5840] Bluetooth: hci1: command tx timeout [ 355.832199][T14051] netlink: 'syz.1.2123': attribute type 4 has an invalid length. [ 356.037005][ T35] team0 (unregistering): Port device team_slave_1 removed [ 356.092401][ T35] team0 (unregistering): Port device team_slave_0 removed [ 356.585947][T13967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.593050][T13967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.620632][T13967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.744553][T13967] hsr_slave_0: entered promiscuous mode [ 356.768179][T13967] hsr_slave_1: entered promiscuous mode [ 356.788532][T13967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.806158][T13967] Cannot create hsr debugfs directory [ 356.822449][T13950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.849924][T14057] vlan0: entered promiscuous mode [ 356.898015][ T5840] Bluetooth: hci3: command tx timeout [ 356.910931][T13950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.922084][T13950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.964691][T13950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.007298][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 357.362350][T14078] ipt_REJECT: TCP_RESET invalid for non-tcp [ 357.376153][T14075] tap1: tun_chr_ioctl cmd 1074025678 [ 357.381506][T14075] tap1: group set to 0 [ 357.438881][T14078] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2131'. [ 357.489745][T13950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.602280][T13950] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.610626][ T5840] Bluetooth: hci1: command tx timeout [ 357.639557][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.646764][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.662874][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.670065][ T8208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.804379][T13967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.822353][T13967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.833554][T13967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.878183][T13967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.897634][T14101] gre0: left promiscuous mode [ 357.903848][T14101] sit0: left promiscuous mode [ 358.103516][T13967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.158527][T13967] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.182669][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.189930][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.208945][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.216183][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.285088][T13950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.410363][T13950] veth0_vlan: entered promiscuous mode [ 358.469170][T13950] veth1_vlan: entered promiscuous mode [ 358.541995][T13950] veth0_macvtap: entered promiscuous mode [ 358.554824][T14124] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2139'. [ 358.581829][T13950] veth1_macvtap: entered promiscuous mode [ 358.598948][T14124] openvswitch: netlink: Missing key (keys=40, expected=80) [ 358.624662][T13950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.653364][T13950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.682343][T13950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.697299][T13950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.715532][T13950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.734688][T13950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.775659][T13967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.955866][ T8198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.965673][ T5840] Bluetooth: hci3: command tx timeout [ 358.994735][ T8198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.086799][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.094704][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.374071][T13967] veth0_vlan: entered promiscuous mode [ 359.390038][T14148] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2144'. [ 359.539416][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'. [ 359.550181][T13967] veth1_vlan: entered promiscuous mode [ 359.557480][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 359.657305][T14160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.690433][T13967] veth0_macvtap: entered promiscuous mode [ 359.898216][ T8200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.948760][T14169] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 359.980653][T13967] veth1_macvtap: entered promiscuous mode [ 360.029255][ T8200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.057926][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.069155][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.080594][T13967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.106692][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.120449][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.131675][T13967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.153545][ T8200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.181006][T13967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.190448][T13967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.199635][T13967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.208424][T13967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.279067][ T8202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.291460][ T8202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.313440][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.321596][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.682796][ T8200] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.910683][ T8200] bridge_slave_1: left allmulticast mode [ 360.916909][ T8200] bridge_slave_1: left promiscuous mode [ 360.922624][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.931206][ T8200] bridge_slave_0: left allmulticast mode [ 360.937459][ T8200] bridge_slave_0: left promiscuous mode [ 360.943132][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.725869][ T8200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.814206][ T8200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.867213][ T8200] bond0 (unregistering): Released all slaves Connection to 10.128.0.150 closed by remote host. [ 363.988074][T14174] ================================================================== [ 363.996278][T14174] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 364.003704][T14174] Write of size 8 at addr ffff88805d0c85a0 by task syz.2.2152/14174 [ 364.011703][T14174] [ 364.014023][T14174] CPU: 1 UID: 0 PID: 14174 Comm: syz.2.2152 Not tainted 6.14.0-rc3-syzkaller-00703-ge13b6da7045f #0 [ 364.014039][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.014056][T14174] Call Trace: [ 364.014065][T14174] [ 364.014072][T14174] dump_stack_lvl+0x241/0x360 [ 364.014091][T14174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.014104][T14174] ? __pfx__printk+0x10/0x10 [ 364.014116][T14174] ? _printk+0xd5/0x120 [ 364.014127][T14174] ? __virt_addr_valid+0x183/0x530 [ 364.014139][T14174] ? __virt_addr_valid+0x183/0x530 [ 364.014151][T14174] print_report+0x16e/0x5b0 [ 364.014166][T14174] ? __virt_addr_valid+0x183/0x530 [ 364.014177][T14174] ? __virt_addr_valid+0x183/0x530 [ 364.014187][T14174] ? __virt_addr_valid+0x45f/0x530 [ 364.014198][T14174] ? __phys_addr+0xba/0x170 [ 364.014215][T14174] ? sco_conn_put+0xad/0x210 [ 364.014230][T14174] kasan_report+0x143/0x180 [ 364.014245][T14174] ? sco_conn_put+0xad/0x210 [ 364.014260][T14174] sco_conn_put+0xad/0x210 [ 364.014273][T14174] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 364.014288][T14174] hci_conn_hash_flush+0x1be/0x350 [ 364.014308][T14174] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 364.014325][T14174] ? drain_workqueue+0x2d3/0x3a0 [ 364.014343][T14174] ? hci_discovery_set_state+0x57/0x180 [ 364.014359][T14174] hci_dev_close_sync+0xa8b/0x1260 [ 364.014377][T14174] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 364.014391][T14174] ? rcu_is_watching+0x15/0xb0 [ 364.014407][T14174] hci_unregister_dev+0x20b/0x510 [ 364.014422][T14174] vhci_release+0x80/0xd0 [ 364.014436][T14174] ? __pfx_vhci_release+0x10/0x10 [ 364.014451][T14174] __fput+0x3e9/0x9f0 [ 364.014471][T14174] task_work_run+0x24f/0x310 [ 364.014487][T14174] ? __pfx_task_work_run+0x10/0x10 [ 364.014499][T14174] ? do_exit+0xa25/0x28e0 [ 364.014515][T14174] ? do_exit+0xa25/0x28e0 [ 364.014532][T14174] do_exit+0xa2a/0x28e0 [ 364.014548][T14174] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.014566][T14174] ? __pfx_do_exit+0x10/0x10 [ 364.014584][T14174] ? lockdep_hardirqs_on+0x99/0x150 [ 364.014603][T14174] do_group_exit+0x207/0x2c0 [ 364.014621][T14174] get_signal+0x168c/0x1720 [ 364.014639][T14174] ? __pfx_get_signal+0x10/0x10 [ 364.014655][T14174] arch_do_signal_or_restart+0x96/0x860 [ 364.014672][T14174] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.014686][T14174] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.014706][T14174] ? syscall_exit_to_user_mode+0xa3/0x340 [ 364.014722][T14174] syscall_exit_to_user_mode+0xce/0x340 [ 364.014743][T14174] do_syscall_64+0x100/0x230 [ 364.014759][T14174] ? clear_bhb_loop+0x35/0x90 [ 364.014776][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.014792][T14174] RIP: 0033:0x7efd319b58a0 [ 364.014803][T14174] Code: Unable to access opcode bytes at 0x7efd319b5876. [ 364.014809][T14174] RSP: 002b:00007ffec82ce938 EFLAGS: 00000246 [ 364.014822][T14174] RAX: 0000000000000000 RBX: 00007efd2fff76c0 RCX: 00007efd3198d1a3 [ 364.014831][T14174] RDX: 00007ffec82ce940 RSI: 00007ffec82cea70 RDI: 0000000000000021 [ 364.014840][T14174] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 364.014848][T14174] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffec82cf020 [ 364.014856][T14174] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 364.014870][T14174] [ 364.014874][T14174] [ 364.331379][T14174] Allocated by task 13635: [ 364.335784][T14174] kasan_save_track+0x3f/0x80 [ 364.340463][T14174] __kasan_kmalloc+0x98/0xb0 [ 364.345056][T14174] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 364.351549][T14174] kmalloc_reserve+0x111/0x2a0 [ 364.356302][T14174] pskb_expand_head+0x1ee/0x1440 [ 364.361225][T14174] netlink_trim+0x1d6/0x2e0 [ 364.365722][T14174] netlink_broadcast_filtered+0x76/0x12a0 [ 364.371440][T14174] nlmsg_notify+0xfb/0x1c0 [ 364.375846][T14174] rtnetlink_event+0x21d/0x260 [ 364.380598][T14174] notifier_call_chain+0x1a5/0x3f0 [ 364.385701][T14174] dev_set_mac_address+0x3d9/0x510 [ 364.390806][T14174] dev_set_mac_address_user+0x31/0x50 [ 364.396169][T14174] do_setlink+0x784/0x4300 [ 364.400576][T14174] rtnl_newlink+0x15af/0x1da0 [ 364.405245][T14174] rtnetlink_rcv_msg+0x791/0xcf0 [ 364.410176][T14174] netlink_rcv_skb+0x206/0x480 [ 364.414933][T14174] netlink_unicast+0x7f6/0x990 [ 364.419689][T14174] netlink_sendmsg+0x8de/0xcb0 [ 364.424442][T14174] __sock_sendmsg+0x221/0x270 [ 364.429106][T14174] __sys_sendto+0x363/0x4c0 [ 364.433603][T14174] __x64_sys_sendto+0xde/0x100 [ 364.438360][T14174] do_syscall_64+0xf3/0x230 [ 364.442855][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.448746][T14174] [ 364.451059][T14174] Freed by task 13635: [ 364.455106][T14174] kasan_save_track+0x3f/0x80 [ 364.459774][T14174] kasan_save_free_info+0x40/0x50 [ 364.464796][T14174] __kasan_slab_free+0x59/0x70 [ 364.469546][T14174] kfree+0x196/0x430 [ 364.473429][T14174] skb_release_data+0x6a0/0x8a0 [ 364.478267][T14174] consume_skb+0x9f/0xf0 [ 364.482501][T14174] netlink_broadcast_filtered+0x116d/0x12a0 [ 364.488387][T14174] nlmsg_notify+0xfb/0x1c0 [ 364.492799][T14174] rtnetlink_event+0x21d/0x260 [ 364.497554][T14174] notifier_call_chain+0x1a5/0x3f0 [ 364.502653][T14174] dev_set_mac_address+0x3d9/0x510 [ 364.507756][T14174] dev_set_mac_address_user+0x31/0x50 [ 364.513122][T14174] do_setlink+0x784/0x4300 [ 364.517527][T14174] rtnl_newlink+0x15af/0x1da0 [ 364.522196][T14174] rtnetlink_rcv_msg+0x791/0xcf0 [ 364.527122][T14174] netlink_rcv_skb+0x206/0x480 [ 364.531876][T14174] netlink_unicast+0x7f6/0x990 [ 364.536654][T14174] netlink_sendmsg+0x8de/0xcb0 [ 364.541414][T14174] __sock_sendmsg+0x221/0x270 [ 364.546079][T14174] __sys_sendto+0x363/0x4c0 [ 364.550573][T14174] __x64_sys_sendto+0xde/0x100 [ 364.555329][T14174] do_syscall_64+0xf3/0x230 [ 364.559823][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.565705][T14174] [ 364.568016][T14174] The buggy address belongs to the object at ffff88805d0c8000 [ 364.568016][T14174] which belongs to the cache kmalloc-2k of size 2048 [ 364.582057][T14174] The buggy address is located 1440 bytes inside of [ 364.582057][T14174] freed 2048-byte region [ffff88805d0c8000, ffff88805d0c8800) [ 364.596014][T14174] [ 364.598327][T14174] The buggy address belongs to the physical page: [ 364.604718][T14174] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d0ca000 pfn:0x5d0c8 [ 364.614775][T14174] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 364.623263][T14174] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 364.631762][T14174] page_type: f5(slab) [ 364.635735][T14174] raw: 00fff00000000240 ffff88801b042000 ffffea000198e010 ffffea0000966c10 [ 364.644309][T14174] raw: ffff88805d0ca000 0000000000080001 00000000f5000000 0000000000000000 [ 364.652879][T14174] head: 00fff00000000240 ffff88801b042000 ffffea000198e010 ffffea0000966c10 [ 364.661537][T14174] head: ffff88805d0ca000 0000000000080001 00000000f5000000 0000000000000000 [ 364.670190][T14174] head: 00fff00000000003 ffffea0001743201 ffffffffffffffff 0000000000000000 [ 364.678845][T14174] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 364.687497][T14174] page dumped because: kasan: bad access detected [ 364.693904][T14174] page_owner tracks the page as allocated [ 364.699603][T14174] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5846, tgid 5846 (syz-executor), ts 59440908427, free_ts 17359426292 [ 364.720347][T14174] post_alloc_hook+0x1f4/0x240 [ 364.725107][T14174] get_page_from_freelist+0x365c/0x37a0 [ 364.730644][T14174] __alloc_frozen_pages_noprof+0x292/0x710 [ 364.736439][T14174] alloc_pages_mpol+0x311/0x660 [ 364.741279][T14174] allocate_slab+0x8f/0x3a0 [ 364.745772][T14174] ___slab_alloc+0xc27/0x14a0 [ 364.750441][T14174] __slab_alloc+0x58/0xa0 [ 364.754765][T14174] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 364.761168][T14174] kmalloc_reserve+0x111/0x2a0 [ 364.765922][T14174] pskb_expand_head+0x1ee/0x1440 [ 364.770842][T14174] netlink_trim+0x1d6/0x2e0 [ 364.775334][T14174] netlink_broadcast_filtered+0x76/0x12a0 [ 364.781043][T14174] nlmsg_notify+0xfb/0x1c0 [ 364.785444][T14174] __dev_notify_flags+0xf7/0x400 [ 364.790368][T14174] rtnl_newlink_create+0x601/0xb30 [ 364.795468][T14174] rtnl_newlink+0x1683/0x1da0 [ 364.800131][T14174] page last free pid 1 tgid 1 stack trace: [ 364.805917][T14174] free_frozen_pages+0xe0d/0x10e0 [ 364.810932][T14174] free_contig_range+0x14c/0x430 [ 364.815856][T14174] destroy_args+0x94/0x4b0 [ 364.820263][T14174] debug_vm_pgtable+0x551/0x590 [ 364.825099][T14174] do_one_initcall+0x248/0x930 [ 364.829853][T14174] do_initcall_level+0x157/0x210 [ 364.834784][T14174] do_initcalls+0x71/0xd0 [ 364.839110][T14174] kernel_init_freeable+0x435/0x5d0 [ 364.844312][T14174] kernel_init+0x1d/0x2b0 [ 364.848638][T14174] ret_from_fork+0x4b/0x80 [ 364.853048][T14174] ret_from_fork_asm+0x1a/0x30 [ 364.857804][T14174] [ 364.860112][T14174] Memory state around the buggy address: [ 364.865725][T14174] ffff88805d0c8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.873777][T14174] ffff88805d0c8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.881825][T14174] >ffff88805d0c8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.889890][T14174] ^ [ 364.894983][T14174] ffff88805d0c8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.903049][T14174] ffff88805d0c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.911101][T14174] ================================================================== [ 364.955367][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 365.013750][T14174] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 365.020992][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.2.2152 Not tainted 6.14.0-rc3-syzkaller-00703-ge13b6da7045f #0 [ 365.031782][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.041827][T14174] Call Trace: [ 365.045100][T14174] [ 365.048018][T14174] dump_stack_lvl+0x241/0x360 [ 365.052681][T14174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.057877][T14174] ? __pfx__printk+0x10/0x10 [ 365.062448][T14174] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.068436][T14174] ? vscnprintf+0x5d/0x90 [ 365.072780][T14174] panic+0x349/0x880 [ 365.076686][T14174] ? check_panic_on_warn+0x21/0xb0 [ 365.081801][T14174] ? __pfx_panic+0x10/0x10 [ 365.086213][T14174] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 365.092181][T14174] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 365.098500][T14174] check_panic_on_warn+0x86/0xb0 [ 365.103427][T14174] ? sco_conn_put+0xad/0x210 [ 365.108002][T14174] end_report+0x77/0x160 [ 365.112231][T14174] kasan_report+0x154/0x180 [ 365.116730][T14174] ? sco_conn_put+0xad/0x210 [ 365.121320][T14174] sco_conn_put+0xad/0x210 [ 365.125726][T14174] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 365.131009][T14174] hci_conn_hash_flush+0x1be/0x350 [ 365.136117][T14174] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 365.141742][T14174] ? drain_workqueue+0x2d3/0x3a0 [ 365.146674][T14174] ? hci_discovery_set_state+0x57/0x180 [ 365.152213][T14174] hci_dev_close_sync+0xa8b/0x1260 [ 365.157321][T14174] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 365.162860][T14174] ? rcu_is_watching+0x15/0xb0 [ 365.167621][T14174] hci_unregister_dev+0x20b/0x510 [ 365.172640][T14174] vhci_release+0x80/0xd0 [ 365.176960][T14174] ? __pfx_vhci_release+0x10/0x10 [ 365.181973][T14174] __fput+0x3e9/0x9f0 [ 365.185955][T14174] task_work_run+0x24f/0x310 [ 365.190537][T14174] ? __pfx_task_work_run+0x10/0x10 [ 365.195640][T14174] ? do_exit+0xa25/0x28e0 [ 365.199961][T14174] ? do_exit+0xa25/0x28e0 [ 365.204301][T14174] do_exit+0xa2a/0x28e0 [ 365.208495][T14174] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.214497][T14174] ? __pfx_do_exit+0x10/0x10 [ 365.219090][T14174] ? lockdep_hardirqs_on+0x99/0x150 [ 365.224296][T14174] do_group_exit+0x207/0x2c0 [ 365.228894][T14174] get_signal+0x168c/0x1720 [ 365.233569][T14174] ? __pfx_get_signal+0x10/0x10 [ 365.238419][T14174] arch_do_signal_or_restart+0x96/0x860 [ 365.244051][T14174] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 365.250284][T14174] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.256267][T14174] ? syscall_exit_to_user_mode+0xa3/0x340 [ 365.261982][T14174] syscall_exit_to_user_mode+0xce/0x340 [ 365.267526][T14174] do_syscall_64+0x100/0x230 [ 365.272111][T14174] ? clear_bhb_loop+0x35/0x90 [ 365.276788][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.282675][T14174] RIP: 0033:0x7efd319b58a0 [ 365.287082][T14174] Code: Unable to access opcode bytes at 0x7efd319b5876. [ 365.294085][T14174] RSP: 002b:00007ffec82ce938 EFLAGS: 00000246 [ 365.300234][T14174] RAX: 0000000000000000 RBX: 00007efd2fff76c0 RCX: 00007efd3198d1a3 [ 365.308195][T14174] RDX: 00007ffec82ce940 RSI: 00007ffec82cea70 RDI: 0000000000000021 [ 365.316159][T14174] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 365.324121][T14174] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffec82cf020 [ 365.332087][T14174] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 365.340059][T14174] [ 365.343350][T14174] Kernel Offset: disabled [ 365.347667][T14174] Rebooting in 86400 seconds..